Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.mft
File: DGZbHrEnmK4OUTDZpLXIYPMn-xo.mft (raw, json)
Hash identifier: 1CDhc/fvABnRSEv2FkvC0axKMYJwoAkJ4KQn4o1INXQ=
Subject key identifier: AE:BD:E9:36:FE:65:13:C6:8E:59:EC:8F:7D:49:F3:70:FF:71:B0:3E
Authority key identifier: 0C:66:5B:1E:B1:27:98:AE:0E:51:30:D9:A4:B5:C8:60:F3:27:FB:1A
Certificate issuer: /CN=0c665b1eb12798ae0e5130d9a4b5c860f327fb1a
Certificate serial: 019D337624A6B1C7E3F46135036B6A3E1EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGZbHrEnmK4OUTDZpLXIYPMn-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.mft
Manifest number: 2A
Signing time: Sat 28 Mar 2026 08:01:13 +0000
Manifest this update: Sat 28 Mar 2026 08:01:13 +0000
Manifest next update: Sun 29 Mar 2026 08:01:13 +0000
Files and hashes: 1: DGZbHrEnmK4OUTDZpLXIYPMn-xo.crl (hash: 1ajQDJRpA6Frix0HuvNr8C2m0pRy9MFPr3Nhhw0K47Y=)
2: HWDXKcpeYuIm0JZrEg_ziDSr5-U.roa (hash: nvDBJqWAeki2gr4Pm4DWKQgwgBSew3rmSC0QFEN6mlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGZbHrEnmK4OUTDZpLXIYPMn-xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:24:a6:b1:c7:e3:f4:61:35:03:6b:6a:3e:1e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c665b1eb12798ae0e5130d9a4b5c860f327fb1a
Validity
Not Before: Mar 28 08:01:13 2026 GMT
Not After : Mar 29 08:01:13 2026 GMT
Subject: CN=aebde936fe6513c68e59ec8f7d49f370ff71b03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b1:5f:50:3b:16:17:95:78:db:66:b4:73:44:
a3:b5:4f:30:f2:6c:42:c6:b8:f6:48:f3:89:6a:ca:
5e:cc:99:c2:9b:4a:3a:1c:4e:c8:b6:16:fb:56:7a:
63:04:8f:10:16:4f:cf:83:36:51:d1:19:77:47:00:
0a:1d:96:00:0b:1a:0c:61:0d:70:15:7f:0d:05:1c:
01:ef:97:1c:5b:99:13:66:98:51:15:ca:aa:fe:f0:
8e:81:7a:88:21:30:8b:d2:9a:b7:f3:27:99:7f:98:
a6:5d:b4:e2:d6:7d:13:03:51:34:93:dc:01:41:13:
3b:c9:5b:56:0d:4f:2d:82:6e:91:83:f0:83:98:78:
7b:0b:73:af:f9:34:e6:c9:17:58:70:ec:e1:ec:09:
75:a5:ab:d5:27:41:ce:44:8e:ff:13:ff:0c:8f:cf:
2b:b1:1f:aa:15:43:0f:f1:52:89:f0:a7:b8:b0:7f:
4d:5b:9f:67:f5:6c:08:04:3a:8d:83:68:ee:c3:c4:
c9:e2:0f:0b:03:84:06:47:2f:df:4e:c1:ef:31:59:
27:a5:64:de:d6:23:e4:b6:08:43:47:1f:7b:aa:f6:
7e:4b:46:91:59:e2:fb:80:6a:ff:32:e0:ef:b8:c4:
f7:dc:86:85:fb:f7:38:e2:66:9a:ac:ab:6f:a8:de:
3b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BD:E9:36:FE:65:13:C6:8E:59:EC:8F:7D:49:F3:70:FF:71:B0:3E
X509v3 Authority Key Identifier:
keyid:0C:66:5B:1E:B1:27:98:AE:0E:51:30:D9:A4:B5:C8:60:F3:27:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGZbHrEnmK4OUTDZpLXIYPMn-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a63d6d-5453-4c01-98b8-6c020968e75a/1/DGZbHrEnmK4OUTDZpLXIYPMn-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9b:2f:15:0e:f6:1a:05:c9:4a:54:ca:91:94:19:43:42:43:
4b:de:0d:14:0c:b0:f7:06:db:7b:c7:e3:c7:0c:2a:6c:99:f3:
06:a4:44:1a:84:f8:8e:4b:dc:f7:3f:aa:2c:f4:72:95:df:11:
df:9a:e8:34:ef:e3:ca:76:16:d3:c5:86:55:00:55:bc:2d:08:
f2:7f:c5:a5:02:13:2e:45:47:70:05:3f:60:80:59:b9:ef:0a:
08:e8:e7:36:3f:5d:c1:57:23:56:17:65:09:fc:96:75:de:5b:
fa:b0:06:80:a1:de:c3:3a:51:30:71:49:5f:25:1d:18:83:7a:
39:c6:10:ad:c3:6f:d2:a7:fa:4a:7c:0b:ba:bb:a8:4f:1e:ea:
70:ee:21:5d:cb:a4:33:53:61:68:2b:b3:e8:4e:06:10:a2:00:
53:13:f8:da:56:b7:d2:c8:3b:97:05:64:98:49:a4:e7:15:34:
17:fd:0c:01:84:31:4b:43:2d:d7:85:f2:4f:ef:25:2d:b3:af:
91:1f:74:42:80:95:d3:50:c4:1c:20:f1:cf:f3:80:1c:ce:f9:
35:1c:af:67:31:ef:49:b8:35:1d:73:4a:c7:18:35:05:9d:2b:
64:43:45:e0:b3:88:9f:3a:c2:61:8a:cd:10:ec:a5:99:45:25:
6c:28:7f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:46 2026 by rpki-client